489

Managing 802.1X on the

WSS Switch

Managing 802.1X on Wired Authentication Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . 489 Managing 802.1X Encryption Keys . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 491 Setting EAP Retransmission Attempts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 495 Managing 802.1X Client Reauthentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 495 Managing Other Timers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 499 Displaying 802.1X Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 502

Certain settings for IEEE 802.1X sessions on the WSS switch are enabled by default. For best results, change the settings only if you are aware of a problem with the WSS switch’s 802.1X performance. For settings that you can reset with a clear command, WSS Software reverts to the default value.

See “Managing WEP Keys” on page 494 for information about changing the settings for Wired-Equivalent Privacy protocol (WEP) key rotation (rekeying).

Caution! 802.1X parameter settings are global for all SSIDs configured on the switch.

Managing 802.1X on Wired Authentication Ports

A wired authentication port is an Ethernet port that has 802.1X authentication enabled for access control. Like wireless users, users that are connected to an WSS switch by Ethernet wire can be authenticated before they can be authorized to use the network. One difference between a wired authenticated user and a wireless authenticated user is that data for wired users is not encrypted after the users are authenticated.

By default, 802.1X authentication is enabled for wired authenticated ports, but you can disable it. You can also set the port to unconditionally authorize, or unconditionally reject, all users.

Nortel WLAN Security Switch 2300 Series Configuration Guide

Page 489
Image 489
Nortel Networks 2300 manual Managing 802.1X on WSS Switch, Managing 802.1X on Wired Authentication Ports